Cross site scripting

Cross-site scripting XSS vulnerability in the Calendar module 6.x before 6.x-2.2 for Drupal allows remote authenticated users, with "create new content types" privileges, to inject arbitrary web script or HTML via the title of a content type...

CVE-2009-3157

The CVE-2009-3157 entry concerns Drupal’s Calendar module (6.x) prior to 6.x-2.2, where remote authenticated users with the ability to create new content types can inject arbitrary script/HTML via the content type title (HTML/XSS). The vulnerability affects the Drupal Calendar module itself, not ...

CVE-2009-3157

Cross-site scripting XSS vulnerability in the Calendar module 6.x before 6.x-2.2 for Drupal allows remote authenticated users, with "create new content types" privileges, to inject arbitrary web script or HTML via the title of a content type...

PT-2009-5473 · Drupal · Drupal Calendar Module

Name of the Vulnerable Software and Affected Versions: Drupal Calendar module version 6.x before 6.x-2.2 Description: A cross-site scripting XSS issue exists in the Calendar module for Drupal, allowing remote authenticated users with "create new content types" privileges to inject arbitrary web...

CVE-2009-3116

SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the year parameter in a calendar action...

Sql injection

SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the year parameter in a calendar action...

CVE-2009-3116

SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the year parameter in a calendar action...

CVE-2009-3116

CVE-2009-3116 is a SQL injection in the Uiga Church Portal, affecting the index.php calendar action where the year parameter can be manipulated to execute arbitrary SQL. The vulnerability is remote-exploitable with high impact (CVSS v2 base 7.5; Confidentiality, Integrity, and Availability partia...

CVE-2009-3081

SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the month parameter in a calendar action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the month parameter in a calendar action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-3081

SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands via the month parameter in a calendar action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-3081

CVE-2009-3081 affects the Uiga Church Portal (index.php). The vulnerability is a SQL injection in the calendar action, exploitable via the month parameter, enabling remote attackers to execute arbitrary SQL commands. Root cause and exact affected version details are not provided in the initial do...

CVE-2009-3021

Cross-site scripting XSS vulnerability in Site Calendar 'mycaljp' plugin 2.0.0 through 2.0.6, as used in the Japanese extended package of Geeklog 1.5.0 through 1.5.2 and when distributed 20090629 or earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Site Calendar 'mycaljp' plugin 2.0.0 through 2.0.6, as used in the Japanese extended package of Geeklog 1.5.0 through 1.5.2 and when distributed 20090629 or earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3021

Cross-site scripting XSS vulnerability in Site Calendar 'mycaljp' plugin 2.0.0 through 2.0.6, as used in the Japanese extended package of Geeklog 1.5.0 through 1.5.2 and when distributed 20090629 or earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3021

The CVE-2009-3021 entry concerns the Site Calendar 'mycaljp' plugin for Geeklog. Affected versions are Site Calendar 'mycaljp' Ver. 2.0.0 through 2.0.6, used in the Japanese extended package of Geeklog 1.5.0 through 1.5.2 (distributed up to 20090629). The vulnerability is cross-site scripting (XS...

Uiga Church Portal (year) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability index.php view Uiga Church Portal http://www.scriptdevelopers.net/products/ucp.html AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: Exploite :-...

Uiga Church Portal - year SQL Injection

Uiga Church Portal - year SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability index.php view Uiga Church Portal http://www.scriptdevelopers.net/products/ucp.html AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: Exploite :-...

Uiga Church Portal (year) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Uiga Church Portal year Remote SQL Injection Vulnerability ============================================================ Remote SQL Injection Vulnerability index.php view Uiga...

Uiga Church Portal - 'year' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability index.php view Uiga Church Portal http://www.scriptdevelopers.net/products/ucp.html AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: Exploite :-...